thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

EC-Council · Cybersecurity · Professional

EC-Council Certified Penetration Testing Professional (CPENT) exam guide

Exam CPENT

Certified Penetration Testing Professional (CPENT) is EC-Council's hands-on penetration testing certification. Candidates attack multi-segment ranges covering Active Directory, web and API, Linux and Windows privilege escalation, IoT and binary exploitation, then submit a professional report, making it a practical step beyond the knowledge-based CEH.

QuestionsSee official page
Time limit1440 minutes
Passing score70% for CPENT (EC-Council notes cut scores can vary by exam form); 90%+ also earns LPT (Master)
Exam feeSee official page
Valid for3 years
DeliveryOnline, remotely proctored

Format: Fully practical, live-proctored range exam: one 24-hour session or two 12-hour sessions, plus written pen test report within 7 days. Fee note: Sold with training: bundles start at $1,999 on-demand and $2,799 live online.

Who it's for

Penetration testers and red team members with CEH-level knowledge who want a practical, report-based credential.

What the exam covers

Engagement planning, ethics and reporting—
Reconnaissance and network/perimeter testing—
Web application and API testing—
Windows and Active Directory exploitation—
Linux exploitation and privilege escalation—
Binary exploitation and reverse engineering—
IoT and social engineering—

A dash means the vendor does not publish a weight for that domain.

Eligibility & prerequisites

Required: None formal for course takers; EC-Council requires at least two years of information security experience for candidates who challenge the exam without training.

Recommended: CEH-level knowledge and practical pen testing practice, including pivoting and AD attacks.

Keeping it active

Valid three years under EC-Council's ECE policy: earn 120 ECE credits in the cycle and pay the $80 annual continuing education fee.

Skills & careers

Skills it validates

  • Multi-level pivoting and tunnelling
  • Active Directory attack paths
  • Web and API exploitation
  • Windows and Linux privilege escalation
  • Basic binary exploitation
  • IoT and OT target testing
  • Writing professional pen test reports

Job roles

Penetration TesterRed Team OperatorOffensive Security ConsultantVulnerability Assessment SpecialistSecurity Consultant

Where it fits in your path

Planning a degree too? See how this cert earns college credit in the College Credit Navigator.

Build my study plan

  1. Month 1: Complete CPENT iLabs modules on recon, web, AD and privilege escalation.
  2. Month 2: Practise pivoting and tunnelling (SSH, proxychains, port forwarding) across multi-subnet labs.
  3. Month 2: Work on binary exploitation basics (stack overflows, simple ROP).
  4. Month 3: Run a full 12-hour practice day and write a report from your notes.
  5. Month 3: Choose the 2x12 or 24-hour format and book.

Make it yours: pick your exam date and weekly hours. We'll split your time by domain weight and give you a printable plan.

Exam-day tips

  • Choose two 12-hour sessions if you need rest; the content is the same.
  • Take screenshots and notes continuously; the report is part of passing.
  • Do not sink hours into one host; ranges are scored across many objectives.
  • Have your pivoting setup scripted before the exam starts.
  • Aim above 90% if you want LPT (Master) from the same attempt.

Key terms for this exam

All 20 terms Study with thinQcards™

Frequently asked questions

How much does CPENT cost?

EC-Council sells it with training; bundles start at $1,999 (on-demand).

How long is the CPENT exam?

24 hours, taken in one session or two 12-hour sessions, plus 7 days for the report.

How do I get LPT (Master)?

Score 90% or more on the CPENT exam and have the report approved.

CPENT vs OSCP?

OSCP+ is better known with hiring managers; CPENT covers a broader range (IoT, binaries) and includes the LPT path.

Does CPENT expire?

Yes, it follows EC-Council's three-year ECE cycle.

Official page: www.eccouncil.org. Reviewed November 2026. Vendors change fees and objectives, so confirm with the vendor before you book. Spot something out of date? Tell us.